registry / nduka / 1.0.5

nduka@1.0.5

WhatsApp AI Gateway

AI Security Review

scanned 2h ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. Runtime networking is package-aligned for configured LLM, transcription, and explicitly configured connector/tool services.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit `nduka` CLI start/worker commands or WhatsApp gateway runtime

Impact

Processes user messages and configured media through user-selected service integrations; no stealth persistence or credential exfiltration path found.

Mechanism

WhatsApp bot gateway with configured LLM, OCR, and connector requests

Rationale

Direct inspection shows an application-oriented WhatsApp AI gateway with explicit runtime commands and configured service calls, not install-time or stealth behavior. Scanner signals reflect normal provider/config/network functionality; no concrete malicious chain was found.

Evidence

package.jsondist/cli/index.jsdist/llm/ocr-registry.jsdist/llm/providers/http-ocr.jsdist/connectors/executor.jsdist/connectors/url-guard.jsdist/gateway/server.jsdist/gateway/bootstrap.jsdist/llm/providers/openai-compat.jsdist/connectors/dns-guard.jsconfig/llm.settings.jsonconfig/tools.chatbot.json

Decision evidence

public snapshot

AI called this Clean at 95.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

`package.json` has no preinstall/install/postinstall hooks.
`dist/cli/index.js` only spawns its packaged Node gateway after explicit CLI commands.
`dist/llm/ocr-registry.js` uses configured provider settings; no dynamic code loading occurs.
`dist/connectors/executor.js` restricts connectors to validated HTTPS allowlists and blocks redirects/private hosts.
No eval, vm, native-module loader, or foreign AI-agent config paths found in inspected `dist` files.
Writes target package runtime config, local `.env`, auth, data, and backups under the working directory.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

GitDependency

scanned 244 file(s), 1.16 MB of source, external domains: api.anthropic.com, api.groq.com, api.mrcnpin.com, api.openai.com, example.com, generativelanguage.googleapis.com, gulfnews.com, openrouter.ai

Source & flagged code

4 flagged

dist/llm/ocr-registry.jsView file

Lines 79-119javascript

79 }

80 }

81 return [...byProviderModel.values()];

82 }

83 select(task) {

84 const required = TASK_CAPABILITY[task];

85 const direct = makeProfile(task, 'primary');

86 if (direct?.capabilities.includes(required))

87 return direct;

88 return this.profiles().find((item) => item.capabilities.includes(required)) || null;

89 }

90 selectFallback(task) {

91 const required = TASK_CAPABILITY[task];

92 const primary = makeProfile(task, 'primary');

93 const fallback = makeProfile(task, 'fallback');

94 if (!fallback?.capabilities.includes(required))

95 return null;

96 if (primary && primary.provider === fallback.provider && primary.model === fallback.model)

97 return null;

98 return fallback;

99 }

100 require(task) {

101 const selected = this.select(task);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/ocr-registry.jsView on unpkg · L99

102 if (selected)

103 return { ok: true, profile: selected };

104 return {

105 ok: false,

106 reason: `No OCR model configured with ${TASK_CAPABILITY[task]} capability for ${task}.`,

107 };

108 }

109 requireFallback(task) {

110 const selected = this.selectFallback(task);

111 if (selected)

112 return { ok: true, profile: selected };

113 return {

114 ok: false,

115 reason: `No distinct fallback OCR model configured with ${TASK_CAPABILITY[task]} capability for ${task}.`,

116 };

117 }

118 formatStatus() {

119 const rows = this.profiles();

dist/message-dedupe/engine.jsView file

Lines 158-198javascript

158 return {

159 ...this.stats,

160 cacheSize: this.cache.size,

161 };

162 }

163 /** Reset stats counters. */

164 resetStats() {

165 this.stats = {

166

package.jsonView file

Lines 1-40json

2 "name": "nduka",

3 "version": "1.0.5",

4 "description": "WhatsApp AI Gateway",

5 "type": "module",

6 "main": "./dist/gateway/server.js",

7 "bin": {

dist/agent-tools/agent-tool-router.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = nduka@1.0.4 matchedIdentity = npm:bmR1a2E:1.0.4 similarity = 0.933 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agent-tools/agent-tool-router.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/llm/ocr-registry.jsView file

99} L100: require(task) { L101: const selected = this.select(task);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/ocr-registry.jsView on unpkg · L99

dist/message-dedupe/engine.jsView file

178} L179: // ─── Private ──────────────────────────────────────────────────────────── L180: buildDedupeKey(key) {

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/message-dedupe/engine.jsView on unpkg · L178

package.jsonView file

•dependencies changed=@whiskeysockets/baileys

Critical

Manifest Confusion

Tarball package.json differs from the npm registry version manifest for scripts or dependency sets.

package.jsonView on unpkg

dist/agent-tools/agent-tool-router.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agent-tools/agent-tool-router.jsView on unpkg

Findings

1 Critical1 High4 Medium5 Low

CriticalManifest Confusionpackage.json

HighPrevious Version Dangerous Deltadist/agent-tools/agent-tool-router.js

MediumDynamic Requiredist/llm/ocr-registry.js

MediumNetwork

MediumEnvironment Vars

MediumGit Dependency

LowScripts Present

LowWeak Cryptodist/message-dedupe/engine.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/llm/ocr-registry.jsView file

Lines 79-119javascript

79 }

80 }

81 return [...byProviderModel.values()];

82 }

83 select(task) {

84 const required = TASK_CAPABILITY[task];

85 const direct = makeProfile(task, 'primary');

86 if (direct?.capabilities.includes(required))

87 return direct;

88 return this.profiles().find((item) => item.capabilities.includes(required)) || null;

89 }

90 selectFallback(task) {

91 const required = TASK_CAPABILITY[task];

92 const primary = makeProfile(task, 'primary');

93 const fallback = makeProfile(task, 'fallback');

94 if (!fallback?.capabilities.includes(required))

95 return null;

96 if (primary && primary.provider === fallback.provider && primary.model === fallback.model)

97 return null;

98 return fallback;

99 }

100 require(task) {

101 const selected = this.select(task);

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/llm/ocr-registry.jsView on unpkg · L99

102 if (selected)

103 return { ok: true, profile: selected };

104 return {

105 ok: false,

106 reason: `No OCR model configured with ${TASK_CAPABILITY[task]} capability for ${task}.`,

107 };

108 }

109 requireFallback(task) {

110 const selected = this.selectFallback(task);

111 if (selected)

112 return { ok: true, profile: selected };

113 return {

114 ok: false,

115 reason: `No distinct fallback OCR model configured with ${TASK_CAPABILITY[task]} capability for ${task}.`,

116 };

117 }

118 formatStatus() {

119 const rows = this.profiles();

dist/message-dedupe/engine.jsView file

Lines 158-198javascript

158 return {

159 ...this.stats,

160 cacheSize: this.cache.size,

161 };

162 }

163 /** Reset stats counters. */

164 resetStats() {

165 this.stats = {

166

package.jsonView file

Lines 1-40json

2 "name": "nduka",

3 "version": "1.0.5",

4 "description": "WhatsApp AI Gateway",

5 "type": "module",

6 "main": "./dist/gateway/server.js",

7 "bin": {

dist/agent-tools/agent-tool-router.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/agent-tools/agent-tool-router.jsView on unpkg